Check all controllers for SQL injection and fix any remaining issues

completed by: Daniel Klischies

mentors: Carsten Schmitz (c_schmitz)